Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hanzhcn/laohan-skills --skill laohan-weiguigit clone --depth 1 https://github.com/hanzhcn/laohan-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-weigui)<a href="https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-weigui"><img src="https://agentmods.dev/badge/skills/hanzhcn/laohan-skills/laohan-weigui/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-weigui"><img src="https://agentmods.dev/badge/skills/hanzhcn/laohan-skills/laohan-weigui.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00108 | $0.02303 |
| Opus 5.5 | $0.00043 | $0.00921 |
| Sonnet 5.5 | $0.00022 | $0.00461 |
| Haiku 4.5 | $0.00011 | $0.00230 |
Grade A, and why
laohan-weigui scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 21d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 154 lines — stays where its author put it; the contents beside it link to each section on GitHub.
抖音文案违规检测
发布前扫描口播稿，找出可能触发抖音限流/禁言/下架的文案风险。它是版本化启发式筛查，不是抖音官方审核器，也不承诺发布结果。
核心理念
抖音审核不是"有敏感词就违规"的简单匹配——同一个词在引用、否定、专业术语等语境下完全合法。过度标记比漏标更糟：如果每次检测都报一堆低风险，用户会养成忽略报告的习惯，真正的高风险就被淹没了。所以宁可漏标也不误标——只标记真实风险，不确定的标低风险并注明原因（高风险类别除外，见评分规则）。
不适用场景
- 视频画面违规（水印、低俗画面）→ 本 skill 只管文案
- 其他平台（小红书/知乎等）→ 词库针对抖音，其他平台规则不同
- 法律合规审查 → 这是平台规则检测，不是法律审查
- 缺少文案内容 → 停下来，告诉用户需要提供文案文件或文本
工作流
1. 读入文案
接收文案来源（文件路径或直接文本），提取纯文本内容。
- 完成条件： 拿到纯文本字符串
- 如果无法获取文案内容 → 停下来，告诉用户需要提供文件路径或直接粘贴文本
2. 按9类扫描
先读取 references/ruleset.json。scan time 超过 expires_at 时在报告写 ruleset_warning: STALE 并安排复核，但不因规则过期自动阻断文案；只有命中明确未解决高风险或扫描根本无法完成时才 REVISE_REQUIRED|BLOCKED。再按 references/keywords.md 词库逐类扫描，每类独立评分。
| 类别 | 代码 | 风险等级 | 说明 |
|---|---|---|---|
| 引流违规 | YL | 高 | 引导用户加微信/扫码/私信等站外引流（含谐音变形：薇信/徵信/加V♥等） |
| 极限词/广告法 | JX | 高 | 最、第一、唯一等绝对化用语 |
| 医疗效果承诺 | YL-MED | 高 | 治愈、根治、100%有效等医疗声明 |
| 金融收益承诺 | YL-FIN | 高 | 保收益、稳赚、具体收益数字 |
| 低质/标题党 | DZ | 中 | 震惊体、悬念杀、信息空洞 |
| 敏感话题 | MG | 高 | 政治敏感、未经证实消息、争议性话题 |
| 平台特有限制 | PT | 中 | 抖音独有的隐性限流规则（重复发布、诱导互动等） |
| 低俗色情 | DS | 高 | 抖音第一红线：擦边/性暗示/软色情即限流，硬色情封号 |
| 引战谩骂 | ZH | 高 | 人身攻击/地域攻击/拉踩引战/脏话，AI测评易踩拉踩线 |
- 完成条件： 9类全部扫描完毕，记录所有匹配项及其上下文
3. 输出报告
当参数含 --episode episodes/<slug> 时，报告只能写入 episodes/<slug>/02-违规报告.md，并以以下 frontmatter 开头；script_hash 是该期 01-口播稿.md 的 SHA-256。任何改稿都必须重跑本步骤，不能复用旧报告。
---
script_hash: <sha256>
risk_status: CLEAR # CLEAR | REVISE_REQUIRED | BLOCKED
unresolved_high_risk_count: 0
ruleset_version: douyin-text-risk-2026-10-05
ruleset_reviewed_at: <复制 references/ruleset.json reviewed_at>
ruleset_expires_at: <复制 references/ruleset.json expires_at>
scan_completed_at: <ISO-8601>
platform_guarantee: false
---
## 违规检测报告
**文案**: {文件名或前20字}
**整体风险**: 🟢当前规则集未发现未解决高风险 / 🟡低风险 / 🟠中风险 / 🔴高风险
### 发现问题
| # | 类别 | 风险 | 原文片段 | 建议替换 |
|---|------|------|---------|---------|
### 统计
- 高风险: X处 | 中风险: X处 | 低风险: X处
- 总扫描字数: X字
### 建议
{高风险>0 → 建议不发布；中风险 → 给修改建议；低风险 → 提醒；无问题 → 明确“当前版本规则集未发现未解决高风险，不代表平台保证”}
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 21d ago Changed 4cd76fe30b7d
- 25d ago Changed b9bfd7e92bae
- 1mo ago First seen · 154 lines · 108 tokens per session scan A 5f047e645c67
laohan-weigui is a skill published in the GitHub repository hanzhcn/laohan-skills (15 stars, last pushed yesterday), licensed MIT. It adds 108 tokens to every session and 2,303 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
healthcare-phi-compliance
Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.
hipaa-compliance
HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.
customs-trade-compliance
Codified expertise for customs documentation, tariff classification, duty optimization, restricted party screening, and regulatory compliance across multiple jurisdictions. Informed by trade compliance specialists with 15+ years experience. Includes HS classification logic, Incoterms application, FTA utilization, and…
baijiahao-upload
A command-line skill for logging into Baijiahao, checking the creator account, and publishing videos. Baijiahao is Baidu's content publishing platform; the skill uses its existing upload tool.
douyin-upload
A workflow for using the sau command-line tool to log in to Douyin, the Chinese short-video platform, check account cookies, and publish videos or image-and-text posts.
officecli-word-form
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document'…